How should I recover data from the computer's system partition?

data recovery from system partition with ufs explorer

Normally, a hard drive of a PC or laptop is divided into several logical partitions for the sake of better performance and increased safety. If one partition gets corrupted, data on other ones remains intact. Traditionally, the operating system and program files are isolated from user data and stored on an independent partition referred to as a system partition ("Local Disk C:" in Windows, for example). Still, some computer systems may rely on a drive with a single partition in which the OS, application software and user files are not separated (for example, Macintosh HD in macOS). Either way, a partition holding the operating system is continuously exposed to writing operations. They are needed to boot the OS and ensure its normal functioning, but result in an extremely high possibility of overwriting the lost data. For this reason, if files of great importance were located on the system partition, it is strongly recommended to avoid running the OS even for the purpose of data recovery and use another computer or a Live CD to minimize the risks. Otherwise, you can recover files like from a non-system partition.

Recover data from the system partition of Windows, Linux, macOS, UNIX or BSD using a second computer

SysDev Laboratories offers UFS Explorer and Recovery Explorer as reliable software tools which have proved to be effective in a variety of data loss scenarios, including ones involving system drives of Windows, macOS, Linux or UNIX/BSD. Different software editions are provided to cover a wide range of specific storage technologies which may be utilized in some system disks. The applications thoroughly analyze the storage in a safe read-only mode to extract the missing files and allow copying them to any safe local or network location.

Hint: For detailed information about the supported file systems and additional storage technologies please refer to the product specifications and the storage technologies page.

In order to perform the procedure with the help of  UFS Explorer Standard Recovery, complete the following steps:

  1. Prepare an auxiliary computer which can be used for data recovery. Download and install the version of the program which corresponds to the operating system it is running.

    Hint: If you have any difficulties with the installation of the utility, please refer to the installation manual for UFS Explorer Standard Recovery.

  2. Find a storage to place the recovered data. This may be the internal drive of the "recovery" PC, a portable device attached to it or a network location.

  3. Unplug the problem computer, unscrew its tower and take out the hard disk drive.

    Note: If the files were deleted from the system startup drive in macOS 10.13 High Sierra and later and despite the recommendations you are not willing to take the disk out, to allow the program to read this storage, you have to disable System Integrity Protection as demonstrated in Unblocking access to macOS drives. Also, please consider that data recovery is not possible for computers that rely on custom Apple’s M1 (Apple Silicon) or T2 security chips.

  4. Shut down the "recovery" PC and connect the removed drive with the help of the fastest interface at your disposal. It is desirable to use a SATA port from the motherboard, but you may choose to trade off performance and employ a USB to SATA adapter or a disk enclosure.

    Hint: If you don't know how you can plug the disk into the motherboard of the computer or сonnect the drive externally using a USB to SATA/IDE adapter, please rely on the video tutorials.

  5. Boot the "recovery" computer and launch UFS Explorer Standard Recovery. Alter the software parameters in the corresponding pane, if needed.

    Warning: When you start the computer, the operating system may prompt formatting or repairing the connected drive. Doing so may cause serious difficulties or even permanent data loss.

  6. Select your hard drive in the list of connected storages in the left pane and scan it for lost data using the corresponding button or the option from the storage context menu.

    three options to start system partition scanning in ufs explorer

    Note: If your drive is missing in the list of devices, you are likely to have a physically flawed drive/enclosure.

  7. Define the preferred parameters of the scan. If you know for sure which file system type you are dealing with, deselect the remaining ones. After that, press "Start scan" and wait for the completion of the procedure.

    set parameters for system partition scanning in ufs explorer

    Hint: More information about configuring the scan can be found in the instruction on scanning a drive with UFS Explorer.

  8. Examine the file system reconstructed by the software: you may sort the found files by name, date, type, put to use quick or advanced search and preview images, videos, audio files or PDF documents. After that, press "Define selection" and specify the items to be copied by placing checkmarks next to them.

    select recovered files to save with ufs explorer define selection tool

    Hint: The information provided in Evaluation and saving the results of data recovery may facilitate your work with the obtained folders and files.

  9. Select a destination folder to save the recovered data.

    save selected recovered files with ufs explorer save selection tool

    Hint: If you are going to save the recovered data to a network storage, please check the provided instruction.

Recover data from the system partition of Windows, Linux, macOS, UNIX or BSD using a Live CD

In some situations disassembling the computer in order to remove its drive is troublesome due to the technological peculiarities of the machine, unwanted owing to the warranty or lack of skills required for manipulating hardware components. In this case one may use UFS Explorer Backup and Emergency Recovery CD – a bootable environment with the live Ubuntu Linux operating system and all the latest releases of UFS Explorer and Recovery Explorer software products, which can be easily burnt to USB flash drive as described in the instruction.

Note:  Please consider that data recovery is not possible for Mac computers that rely on custom Apple’s M1 (Apple Silicon) or T2 security chips. More details can be found in Unblocking access to macOS drives.

In order to rescue the lost data with the help of  UFS Explorer Backup and Emergency Recovery CD , please proceed as follows:

  1. Download the ISO file of the product to any other computer.

  2. Burn this ISO image to a CD/DVD or make a bootable USB stick utilizing a specialized software application of your choice, for example, as described in Creating a bootable (live) USB drive.

  3. Connect the bootable medium to the problem computer. Also, prepare a target storage to place the recovered files (a portable device or a network location).

  4. Restart this computer and enter to the Boot menu by pressing F11 or F12 (Esc for older systems) on the start screen and select the connected CD/DVD-ROM or USB flash drive.

    select cd-rom drive option in boot menu

  5. Press Enter to run the Ubuntu Linux operating system.

    boot ubuntu linux from ufs explorer emergency CD

  6. Launch the needed data recovery program, for instance, UFS Explorer Standard Recovery, from the desktop and change its settings in the corresponding pane.

    change ufs explorer standard recovery settings

    Note: To use the software on a live CD, a Linux version of the license is required.

  7. Perform steps 6-9 described in the previous section.

Last update: August 09, 2022

If you liked this article, you can share it on social media: